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Abstract —  From  a  managerial  point  of  view,  considering  budgets  increasingly  lean  and  controlled, 
besides  a  restricted  schedule  there  is  a  need  to  find  cheaper  and  more  viable  alternatives  for  the  scenario 
presented  with  related  to  commercial  electronics  parts.  On  the  other  hand,  the  increasing  offer  of  COTS 
( Commercial  Off  The  Shelf)  with  the  reached  quality  by  manufacturers  seems  a  good  opportunity  to  use 
COTS  components  in  electronic  projects  for  small  satellites  with  short  and  medium-term  missions,  through 
a  coherent  study  that  meets  the  restrictions  mentioned  above.  For  that,  a  method  that  helps  in  indicating 
the  best  COTS  for  the  systems  engineer  and/or  project  engineering  can  be  of  great  use. 
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I.  INTRODUCTION 

The  current  trend  in  the  use  of  Commercial-Off-The- 
Shelf  (COTS)  components,  because  of  cost  management, 
development  time,  availability  for  purchase  beyond  the 
quality  levels  achieved  with  the  accelerated  growth  in  the 
utilization  in  automotive  electronics,  and  smart  phone,  sees 
an  excellent  opportunity  for  its  use  in  short-term  space 
projects. 

On  the  other  hand,  COTS  does  not  follow  the  rigor 
established  in  the  military  standards  in  terms  of  tests, 
selection,  documentation,  and  quality  levels  reached,  which 
makes  it  very  difficult  to  trace  the  component  in  its 
manufacture  and  tests. 

The  great  obstacle  in  the  use  of  these  components  falls 
in  the  spatial  case  on  the  inhospitable  environment  to 
which  they  will  be  submitted. 

In  the  space  environment,  some  of  the  main  factors  that 
degrade  the  components  are: 

•  Vibration  (acceleration)  at  launch; 

•  Thermal  (during  the  life  cycle  of  the  satellite); 

•  Ionizing  radiation  (total  accumulated  dose  -  TID 
and  single-effect  events  -  SEE's)  from  the  trapped  particle 
in  radiation  belt  around  of  the  Earth  and  solar  activity; 
Therefore,  the  right  choice  of  EEE  components  to  be  used 
in  the  design  of  satellite  subsystems  /  equipment  is  of 
paramount  importance. 


Choosing  the  best  COTS  becomes  a  KEY 
OPERATION  in  terms  of  quality. 

In  this  study,  we  considered  the  design  of  an  equipment 
/  subsystem.  The  COTS  component  to  be  used  in  the 
equipment  performs  a  specific  function  according  to  the 
electrical  functional  requirement  of  the  proposed  circuit  in 
a  given  electronic  module  as  a  solution  to  the  desired 
functionality. 

II.  OBJECTIVE 

This  paper  proposal  aims  to  present  a  methodology  for 
the  selection  of  EEE  COTS  components  in  small  satellites 
and  short  duration  missions. 

III.  DEFINITION 

Important  definitions  of  COTS  according  to  NASA  [1]: 

3.1  COTS:  A  component  designed  for  applications  in 
which  only  the  manufacturer  of  the  item  or  supplier 
establishes  and  controls  the  specifications  for  performance, 
configuration  and  reliability  (including  design,  materials, 
processes  and  testing),  without  additional  requirements 
imposed  by  external  users  and  /  or  organizations.  For 
example,  any  type  of  assembly  or  component  through  a 
catalog  without  any  additional  testing  at  the  component 
level.  Delivery  of  the  component  by  the  manufacturer  as  is. 
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3.2  COMPONENT  SELECTION:  Consists  of  a  series 
of  tests  and  inspections  to  remove  non -conforming 
components  and/or  infant  mortality  (components  with 
defects  that  are  likely  to  result  in  initial  failures)  and  thus 
increase  the  reliability  of  the  components  selected  for  use. 

3.3  COMPONENT  BURN  IN  TEST:  Test  applied  to 
the  electrically  charged  component  (current  or  voltage)  at 
an  elevated  temperature  for  a  specified  number  of  hours.  It 
is  an  accelerated  aging  process  and  attempts  to  stress  the 
component  at  a  maximum  rated  value  under  operating 
conditions  to  reveal  intrinsic  at  time  failures  and  early 
defects  (infant  mortality:  manufacturing  defects). 

3.4  COMPONENT  CHARACTERIZATION:  Process 
of  testing  a  sample  of  components  in  an  environmental 
range  (temperature  thresholds  and  acceleration  levels)  and 
applications  to  determine  the  ranges  of  key  electrical 
parameter  values  that  can  be  expected  from  all  components 
produced  of  the  type  tested.  Component  characterization 
results  are  often  used  as  a  basis  for  establishing  batch 
qualification  tests. 

3.5  COMPONENT  SCREENING:  A  series  of 
intended  component-level  tests  and  inspections  to  remove 
nonconformities  and  child  mortality  (defective 
components)  and  increase  confidence  in  the  component 
selected  for  use. 

IV.  CONTEXTUALIZATION 

There  are  three  main  reasons  for  using  COTS 
components  in  space  projects: 

•  Best  performance; 

•  The  absence  of  list  of  parts  qualified  for  space; 

•  1/10  of  the  cost  of  QPL  equivalent  for  space 

The  first  two  items  are  the  main  reasons  for  use  in 
space  projects,  the  lowest  cost  being  the  main  driver  for 
satellite  launchers  and  constellations  (http://wpo- 
altertechonology.com/accede)  [2]. 

Given  the  possibility  of  using  some  options  available  in 
the  market,  but  different  manufacturers  and  unknown 
quality  levels  in  terms  of  reliability,  we  propose  to  discuss 
the  following  approaches: 

4.1  Develop  a  method  of  choice  based  on  adaptations 
of  issues  from  the  reliability  area  to  a  failure  probability 
approach; 

4.2  Use  the  FIDES  guide  [3]  to  calculate  component 
failure  rate  based  on  physical  failure  mechanisms 
(Overstress:  thermal,  mechanical,  relative  humidity, 
subassembly  of  plates  and  weld  points)  and  manufacturers' 


quality  factors  (manufacturing  processes  and  quality) 
considering  the  life  stages  of  the  component; 

4.3  Show  a  path  for  choosing  cost-based  COTS  in 
specific  cases  when  the  intended  COTS  in  the  project  does 
not  have  sufficient  data  to  prove  or  demonstrate  the  desired 
reliability  through  accelerated  environmental  testing  for 
MTTF  inferences  and  burn-in  for  the  general  cases  (  up 
screening). 

V.  METHODOLOGY 

The  selection  of  the  appropriate  COTS  component  is 
not  a  trivial  task  and  was  considered  a  decision-making 
process  with  several  criteria.  In  our  case,  only  two  criteria: 
reliability  and  cost. 

After  allocating  the  reliability  of  the  proposed 
electronic  subsystems  /  modules,  taking  into  account  the 
minimum  reliability  established  for  the  subsystem  in 
question  (our  case  study:  power  module  -  DC  /  DC 
converter),  an  analysis  will  be  made  using  the  FIDES 
method  to  find  out  the  failure  rate  and  a  theoretical  cost 
analysis  related  to  the  minimum  tests  necessary  for 
screening  in  specific  cases 

VI.  FORMULATION 

We  formulated  the  selection  model  considering  the 
following  challenges  associated  with  the  problem: 

6.1  Complexity:  Integration  level  for  IC  and  Hybrid 
integrated  circuits  (analog  and  digital  circuits  and  logic 
gate  No.); 

6.2  Costs:  Additional  Electrical  /  Environmental 
Functional  Tests  -  Burn-in  and  HALT/MTOL  [4]; 

6.3  Weighted  quality  level:  (AHP  or  FIDES  Guide 

[5]:  manufacturer  quality  factors,  features,  and 

functionality  preferences); 

6.4  Operational  profile:  Mission  time,  Operating 
temperature,  duty  cycle  and  radiation  exposure  (tests  and 
solutions  knows  to  mitigation); 

Note:  Bold  item  involve  additional  costs  and  will  be 
treated  with  a  comparative  cost  analysis  to  MIL  STD  883 
or  ECSS-Q-ST-60-13C  class  3  [5] 

VII.  PROCEDURE  FOR  CHOSING 

7.1  FMECA  shall  be  done  to  indicate  the  critical  parts 
that  can  take  a  crucial  failures  of  the 
system/subsystem; 

7.2  Calculate  of  the  importance  of  reliability  of  each 
component  (Bimbaum  measure)  based  on  the 
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failure  rate  (A,)  of  an  equivalent  component  MIL 
883  (HDBK217)  [6]. 

7.3  Mapping  of  less  critical  components  after  the 
considerations  earlier  done; 

7.4  Using  the  FIDES  Guide  to  determine  the  failure 
rate  by  treating  the  physical  failure  mechanism 
besides  the  Karmiol  /  Bracha  Method  (adapted) 
with  focus  on  the  complexity  the  most  important 
effect  from  the  effects  factors  listed  below,  once 
that  it  will  be  treated  of  analogous  way  to 
component  level: 

7.4. 1  Operating  time  /  duty  cycle 

7.4.2  Operating  Profile  (Temperature  Range) 

7.4.3  Component  complexity; 

7.5  Optimization  method  [7]  based  on  two  criteria: 
Reliability  and  Cost  (testing),  aiming  at  up- 
screening  having  reference  to  MIL  883  or  ECSS- 
Q-ST-60-13  C  class  3; 

7.6  Decision  making  of  proposed  COTS  components 
based  on  data  obtained  from  manufacturers  audit 
by  questions  formulated  in  FIDES  Method  and 
expert  opinion  (using  the  AHP  or  WSM  method). 

Note:  The  FIDES  Guide  deals  with  manufacturer  quality 
factors  (n_PM  and  Il  Process)  together  with  the  AHP 
method  can  be  treated  with  the  designers  the  preference 
functional  of  the  component. 


VIII.  APPROACHES  TO  ITS  SOLUTION 

In  order  to  begin  the  discussion  around  the  problem  of 
choosing  the  appropriate  COTS  to  meet  the  electrical  and 
environmental  functional  requirements  required  in  the 
project,  we  must  stick  to  the  sequence  of  steps  necessary  to 
achieve  our  goal  starting  with  the  allocation  of  reliability 
for  each  unit  or  subsystem  of  the  mini- satellite  so  that  the 
mission  achieves  its  goal. 

A  reliability  allocation  study  must  have  been  done 
previously  at  the  subsystem/equipment/  module  level 
before  we  can  start  choosing  the  COTS  component  to  use. 

Schematic  diagrams  of  the  problem  and  solution  are 
shown  in  Figures  1,  2  and  3  as  follow: 


Propose  Solution: 


CubeSat  Reliability  Diagram  Block  -  ( Rs(t )  -  in  serie) 


Fig  1:  COTS  to  be  used 
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Fig  2:  Methodology  for  choosing  COTS 


Fig  3:  Flowchart  COTS  Algorithm  of  Choice 
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Once  we  have  the  number  or  figure  of  reliability  of  the 
subsystem  under  study  we  will  treat  on  the  suggested 
procedure. 

We  use  the  reliability  allocation  method  called  the 
AGREE  method  which  is  based  on  the  complexity  of  the 
unit  or  subsystem  rather  than  the  failure  rate.  The 
importance  or  essentiality  of  the  unit  quantitatively  defines 
the  relationship  between  the  unit  and  the  target  system 
failure  rate  and  is  explicitly  considered  in  the  AGREE 
allocation  formula. 

The  allocation  formula  is  used  to  determine  the 
minimum  acceptable  average  time  of  each  unit  to  satisfy 
the  minimum  acceptable  system  reliability.  The  premise  is 
that  the  unit  within  the  system  has  an  independent  failure 
rate  and  operates  in  series  with  respect  to  its  effects  on 
mission  success. 

Unit  complexity  is  defined  in  terms  of  the  number  of 
modules  and  associated  circuits  where  a  module  can  be  a 
valve,  a  transistor  or  a  magnetic  amplifier.  The  unit 
importance  factor  is  defined  as  the  probability  of  system  / 
unit  failure  if  a  particular  unit  fails.  If  the  factor  of  the 
importance  of  a  unit  is  1  the  unit  must  operate  satisfactorily 
for  the  system  to  operate  satisfactorily  otherwise  if  the 
factor  of  0  then  the  failure  of  the  considered  unit  does  not 
interfere  with  satisfactory  system  operation. 

The  specific  basis  of  allocation  is  to  require  each 
module  to  make  an  equal  contribution  to  the  success  of  the 
mission  and  the  equivalent  requirement  would  be  for  each 
module  to  have  the  same  expected  average  life  or  failure 
rate. 

The  mathematical  model  for  the  method  considering 
the  approximation: 


e  x  =  1  —  x 


(1) 


Where: 

x  is  a  small  and  less  than  1 

The  allocated  failure  rate  of  this  unit  is  shown  in 
AGREE. 

_  nj[-logeR*(T)] 


N  =  total  number  of  components  in  the  system; 

Ej  =  Importance  factor  of  jth  unit, 
and 

tj  =  number  of  hours  the  jth  unit  will  be  required  to 
operate  in  T  system  hours  (mission  time)  (0  <tj 
(duty  cycle)  <  T) 

The  allocated  reliability  for  the  jth  unit  (subsystem)  for 
tj  (duty  cycle)  unit  operating  hours,  R  (tj),  is  given  by 


R(tj)  =  1  - 


l-[R(T)]ni/N 

Ej 


(3) 


IX.  BIRNBAUM  MEASURE 

The  importance  of  a  component  should  depend  on  two 
factors  [8]: 

9.1  The  location  of  the  component  in  the  PC  A  /  Unit; 
here  we  are  concerned  with  a  good  thermal  design 
in  order  to  reduce  thermal  stress,  understanding 
that  temperature  is  one  of  the  main  factors  for 
component  reliability; 

9.2  The  reliability  of  the  component  in  question. 


Birnbaum  (1969)  proposed  the  following  measure  of 
reliability  importance  of  a  component 

Birnbaum' s  measure  of  the  importance  of  a  component 
i  at  time  t  is: 


I B (i/t) 


dh(p(t) 

dpi(t) 


(4) 


Birbaum's  measurement  is  then  obtained  from  the 
partial  differentiation  of  system  reliability  with  respect  to 
pi  (t).  This  approach  is  well  known  as  a  classical  sensitivity 
analysis.  If  I B (i/t)  is  large,  a  small  change  in  component 
reliability  will  result  in  a  large  variation  in  system 
reliability  over  time.  Let's  consider  each  independent 
component  for  analysis,  this  means  that  there  is  no 
independence  between  components  (obviously  this 
approach  does  not  reflect  the  actual  behavior  of  systems, 
this  is  the  interdependence  between  modules  or  series 
components)  but  already  points  to  a  degree  of  importance, 
reasonable  in  its  determination. 


By  noting  the  fault  tree,  Birnbaum's  measurement  [9] 
can  be  rewritten: 


Where: 

nj  =  number  of  modules  (module  =  electronic 
component)  of  subsystem  /  unit,  jth; 


I B (i/t) 


dQO(t) 

dqi(t) 


Where: 


qi  (t)  =  1-pi  (t) 


(5) 
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Q0(t)  =  1  -  ps(t)  =  1  -  h(p(t)) 

Birnbaum's  measure  is  named  after  the  Hungarian- 
American  professor  Zygmund  William  Birnbaum  (1903- 
2000) 

Thus,  the  next  step  in  this  methodology  would  be  the 
search  for  options  for  DC/DC  converters  in  the  component 
market  that  would  meet  the  functional  electrical  and 
environmental  requirements  of  the  project.  For  this,  we 
need  to  find  out  a  failure  rate  related  to  DC/DC  Converter 
prescribed  and  to  check  if  that  value  is  appropriated  in  our 
case  it  means  if  the  value  not  compromised  the  reliability 
allocated  for  the  unit.  Otherwise,  it  continues  to  choose 
another  part  that  meets  this  requirement. 

X.  FAILURE  SURVEY  OF  COTS  [FIDES  GUIDES] 

Reliability  Prediction  Using  the  FIDES  2009  Guide. 

The  FIDES  evaluation  model  proposes  a  reliability 
prediction  with  constant  failure  rates.  Therefore,  the 
probability  of  failure  is  independent  of  the  number  of  hours 
of  a  component  in  operation.  This  means  that  only  random 
failures  during  the  life  of  a  component  are  considered  and 
early  failures  (infant  mortality)  and  wear  failures  are  not 
included. 

This  methodology  for  reliability  evaluation  in 
electronic  components  has  two  components: 

-  Component  reliability  prediction  guide, 

-  Reliability  process  control  and  audit  guide. 

Although  component  prediction  models  allow 
component  failure  rates  to  be  calculated  based  on 
component  characteristics  and  application-related  data  (eg, 
applied  thermal  and  electrical  stress),  the  reliability  process 
control  and  audit  guide  assess  component  manufacturing 
quality  and  the  effects  of  all  processes  throughout  the  life 
cycle  from  the  design  specification  phase  to  maintenance 
and  support  activities.  The  FIDES  Guide  aims  to  enable  a 
realistic  assessment  of  the  reliability  of  electronic 
equipment,  including  systems  operating  in  harsh 
environments  (defense  systems,  aeronautics,  industrial 
electronics,  transportation,  etc.).  The  general  model  of 
FIDES  is  expressed  by  the  equation: 

^  —  ^-Physical  *  ^pm  *  riprocess  (6) 

In  this  case,  our  components  for  study:  a  DC  /  DC 
converter  (hybrid),  A/D  Converter  (IC)  and  a 


semiconductor  we  apply  to  formulas  to  find  the  failure  rate, 
as  follows: 

Hybrid 

^Physical  =  £Phases(  )  —  *  [(A0XH-TCy  *  0th  * 

nTH  +  YTcy  *  nXCy)  +  Aqm-rh  *  (ym  *  nM  +YRH  *  nRH)]  * 

(^induced))  ~  (7) 

Integrated  Circuit  and  Semiconductor 
^Physical  =  ^Phases(____)  _  *  [(X0TH  *  IIXH  + 

^-OTCyCase  *  ^TCyCase  +  ^-OTCySolderjoints  *  nxcys0lderjoints 

^-ORH  *  nRH  +  AoMech  *  H^edi)]  *  (^induced)  ~ 

(8) 

Nota:  All  factors  (sensitivity,  location,  technological, 
physical  stress)  and  basic  failure  rate  associated  with  the 
assembly  will  be  requested  in  the  algorithm  of  choice.  The 
nPM  *  nProcess  parameters  are  quality  factors  of  the 
manufacturer  and  of  the  component  and  are  calculated 
based  on  evaluations  and  audits  at  the  manufacturer  when 
is  possible,  if  not,  we  use  default  values  suggested  by 
FIDES. 

XI.  COMPLEXITY  FACTOR 

We  will  make  an  analogy  with  the  Karmiol  /  Bracha  [9] 
(the  method  used  to  determine  effects  factor  weights  to 
obtain  unreliability  and  subsequently  allocate  reliability  to 
subsystem/unit)  with  the  complexity  of  a  component 
understanding  that  the  problem  handling  can  be  analogous. 
We  introduce  this  factor  to  increase  the  stiffness  in  the 
reliability  calculation  since  we  cannot  be  increased 
reliability  in  the  usual  ways  as  a  redundancy.  In  fact,  the 
idea  is  to  increase  unreliability  by  the  fact  to  be  COTS 

Karmiol/Bracha(adapted)  considers  four  effect  factors, 
namely: 

a)  Sublevel  Complexity; 

b)  Operating  time; 

c)  Operational  profile; 

d)  Criticality  and  State  of  art 

Understanding  that  items  b,  c,  d  are  somehow  already 
covered  in  the  physical  failure  rate  model  through  the 
failure  mechanisms  addressed  by  the  FIDES  method,  we 
focus  our  efforts  on  complexity. 

C  =  1  -  e~Kb+0-6kp  (9) 

Where: 
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Kb  and  Kp  should  be  estimated  at  the  beginning  of  the 
development  stage. 

Kbi  =  10  nbi/nbc 

nbi  =  Number  of  components  at  sub  level  i; 

nbc  =  Number  of  components  in  the  most  complex  sub 
level 

*Kp  =  Number  of  redundant  components 

*The  Kp  factor  will  not  be  used  because  the  component 
functionality  internal  is  not  being  redundant.  We 
understand  that  the  complexity  of  the  component  is 
associated  with  the  levels  of  integration  of  the  various 
functions  performed  by  the  component,  for  instance, 
hybrids  and  microcircuits. 

So  the  complexity  factor  is: 

C  =  (1  -  e"Kb) 

Therefore,  for  a  semiconductor  type,  we  have  for 
example: 


Bipolar,  Transistor  and  Mosfet 

Fig  4:  Semiconductor  Schematic  Symbols 


A/D  Converter 
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Fig  5:  (MAXI  112)  [10] 


Functional  Diagram 


EE 

ECLK 


DIN 

~am 


CHS 

CHI 

CH2 

CHS 

CH4* 

CH5* 

CHS* 

CH7* 

COM 


REFOLTT 


REFIN 


‘MAX1 11 2  ONLY 


Kb=10 

C  =  (1-0.00004539993) 

C=  0.9999540007 

In  other  words,  the  complexity  of  the  component  in  this 
case  is  low  and  therefore  coherent  with  the  semiconductor 
diode  component.  By  the  other  hand  component  more 
complex  tends  to  zero. 

Low  Complexity^  1 
High  Complexity-  0 


Fig  6:  Ex.:  Schematic  symbol  of  an  A/  D  converter 

Kb=10 

nbi  =  8  [n.  of  elements  at  sub  level  i  (functional  blocks)] 

Active  Components: 

Input  Shift  Register,  Output  Shifter  Register,  Logic 
Control,  I/O  Multiplexer,  Voltage  Reference,  8 -bit  A/D 
Converter,  Clock  Generator,  T  /  H, 


For  an  integrated  circuit,  we  have: 


Passive  Component: 


Analog  switch 

nbc  =  300  [number  of  elements  (discrete  components)  in 
sub-level  most  complex] 
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Kb;  =  10  nbi/nbc 
Kbi =  10(8/300) 
kbi  =  0.26 
C  =  (1  -  e-Kb) 

C  =  (1  -  e-0-26) 

C  =  0.23 

For  a  Hybrid  type  circuit  (DC  /  DC  Converter)  we  have: 


Voltage  Converter 


v+ 

c+ 

> 

GND 

Vou, 

C 

Fig  7:  Ex.:  DC  /DC  Converter  Block 


Block  Diagram 

SHDN  SW 


Fig  8:  Block  diagram  of  the  DC  /DC  Converter 

(LM2731)  [11] 

C  =  (1  -  e"Kb) 

Kb  =  10 

nbi  =  22  (n.  of  elements  in  1st  level) 

Active  Components: 

Comparator,  PWM,  FF  (RS),  Oscillator,  Adder,  Ramp 
Generator,  Current  Limiter,  Shutdown  Circuit,  Driver, 
Transistors  and  FET 

Passive  Components: 

Resistors  and  Capacitor 


Kbi  =1.4 

c  =  (1  -  e-Kb) 

C  =  0.75 

After  we  have  been  able  to  determine  a  failure  rate  for  the 
COTS  via  the  FIDES  method  we  multiply  the  result  by  C 
(complexity  factor)  and  close  the  loop  in  the  choice 
algorithm  to  see  if  the  value  still  meets  the  allocated 
reliability  for  the  module/circuit  in  question  (one  mix 
between  two  methods  FIDES  and  HDKB  217).  Another 
thing  that  must  be  observed  in  the  case  of  less  complex 
digital  components  is  that  the  number  of  gates  will  be  used 
as  a  stiffness  factor  in  the  failure  rate.  Otherwise,  we  start 
with  a  new  choice  from  the  available  manufacturers.  If  not 
apply  additional  tests  like  Burn-in  or  (HALT  or  MTOL)  for 
MTTF  inference  and  cost  analysis,  optimizing  Reliability 
versus  Cost  and  having  as  a  reference  to  MIL  883  or 
ECSS-Q-ST-60  -13C  Class  3 

The  decision  making  in  choosing  the  COTS  would  then  be 
after  the  analysis  of  the  component  failure  rate  via  FIDES 
Guide  and  its  consistency  with  a  decision  based  on 
functional  component  preferences  by  the  designer  through 
an  analysis  via  AHP  and  the  listed  criteria. 

XII.  COTS  RADIATION 

Considering  the  cost  of  testing  in  a  qualified  laboratory 
in  the  order  of  USD  1500  per  hour  and  minimum  test  time 
required  of  60  hours,  one  can  have  an  idea  of  the  final  cost 
of  one  of  these  non-destructive  tests  since  one  would  be 
curious  to  see  the  functional  behavior  (some  electrical 
parameters)  of  a  specific  component  under  radiation  levels 
that  must  be  found  in  the  environment  provided  for  in  the 
mission  based  on  Software  such  as  SPENVIS  of  ESA, 
OMERE  and  ANGEL  [12] 

Some  radiation  of  the  type  TID,  SEU  and  SET  can  be 
mitigated  by  means  of  some  known  solutions,  such  as: 

12.1  Physics:  -  Metallic  shield  (Titanium  sheet); 

12.2  Better  Physical  Positioning  of  the  radiation 
sensitive  (critical)  electronic  module  inside  the  satellite 
(small  satellites)  -  Software:  GEANT  4,  TRAD'S  and 
FASTRAD  [13]; 

12.3  Coding:  EDAC,  Watchdog  Timers,  TMR  and 
HDL 


nbc =  148 

Kbi  =  10  nbi  /  nbc 

Kbi  =  10  (22/148) 
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XIII.  ENVIRONMENTAL  TESTS  FOR  SPECIFIC 

COTS 

We  will  start  by  treating  Burn-in  tests  as  the  main  test 
for  the  elimination  of  defective  components  (infant 
mortality),  understanding  that  eliminating  the  components 
that  may  have  manufacturing  defects,  the  rest  according  to 
the  bathtub  curve  (failure  rate  versus  time  curve). )  remains 
constant  with  constant  failure  rate  during  its  "useful  life" 
and  "wear"  at  the  end  of  the  project's  useful  life. 


It  is  understood  that  the  rate  of  thermal  variation 
predicted  in  the  Burn-in  tests  (cycle:  hot  <->  cold)  will 
induce  the  mechanisms  of  physical  failure  of  the 
component  in  addition  to  an  acceleration  in  the  aging  of  the 
component. 


Fig  9:  Failure  rate  characteristic 


Table  01.  ECSS-Q-ST-60-13  (today)  applicable  for 

active  FEE 


Additional  accelerated  thermal  tests  in  order  to  verify 
the  MTTF  and  estimate  a  batch  failure  rate  will  also  be 
carried  out  and  inspections  based  and  adapted  according  to 
the  reference 

ECSS-Q-ST-60-13C  Class  3 

XIV.  COST  ANALYSIS 

All  of  these  tests  generate  costs  so  a  balanced  cost 
analysis  of  the  type  of  optimization  will  be  necessary  and  a 
risk  analysis  associated  with  the  problem  will  be 
implemented. 

Total  cost  of  a  Burn  in  test: 

C  =  Ax  +  L[(l  -  R(X)]  (10) 

Where: 

A:  is  the  cost  of  Burn  in  per  unit  time 
L:  is  the  cost  of  a  failure  during  Burn  in 
R  (X)  =  Distribution  curve  Probability  of  Failure  (eg: 
Weibull)  [17] 


Class  1 

Class  2 

Class  3 

Evaluation 

Complete 

Complete 

Partial 

Justification 

data  collection 

data  collection 

data  collection 

Screening 

Complete 

Partial 

Light 

Lot  test 

Complete 

Complete 

Partial 

Summary  of  tests  and  inspections  to  be  applied  in  the 
COTS: 

14.1  Incoming  inspection:  date  code,  dimensional  and 
visual  characteristics  (oxidation  of  leads  and  visual  aspect 
of  the  encapsulation); 

14.2  Specific  Electrical  Tests  (digital  and  analogic); 

14.3  PIND  and  Hermeticity  test  (if  applicable); 

14.4  Burn  in  and  HAST  test  (special  cases); 

14.5  Documentary  verification  (manufacturer  data 
collection) 


XV.  RISK  ANALYSIS 

This  paper  proposal  aims  to  present  a  methodology  for 
the  selection  of  EEE  COTS  components  in  small  satellites 
and  short  duration  missions. 
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max 


cost  to  tost 


min 


costand  schedule 
impact  to  fix 


Parts 


Board 


Fig  10:  Notion  of  cost  /  schedule  and  its  impacts  by 

developing  tests  at  the  level  of  Components,  Cards  (PC A) 
and  Boxes  [14] 


Figure  10  shows  in  the  simplified  representation  that 
the  cost  to  test  decreases  while  the  impact  on  cost  and 
schedule  for  correction  increases  as  component,  board,  and 
box  level  testing  is  performed.  This  occurs  in  component 
because  the  number  of  independent  tests  required  decreases 
when  moving  to  a  higher  level  of  testing.  The  cost  of 
testing  may  be  lower,  but  the  cost  and  schedule 
consequences  of  a  failure  occurring  increase  dramatically. 
Total  cost  is  lower  if  no  problem  or  failure  is  detected  at 
higher  levels  of  testing. 


We  conclude  that  testing  is  important  for  minimizing 
future  impacts  and  consequences.  Therefore,  there  is  a 
need  to  find  a  compromise  or  to  measure  and  quantify  the 
necessary  tests  in  order  to  have  a  reasonable  level  of 
confidence  for  decision  making  when  choosing  the  COTS 
to  be  used. 


Fig  11:  Notion  of  ability  to  detect  defects  in  components 
and  Interaction  between  components  when  developing  tests 
at  the  level  of  components,  PCA  and  Box 


Figure  11,  in  a  simplified  representation,  shows  that 
testing  at  lower  levels  of  integration  improves  the  ability  to 
detect  component  defects.  Many  partial  defects  are  masked 
at  higher  levels  of  integration,  but  identifying  these  defects 
will  increase  system  reliability,  reducing  the  likelihood  of 
latent  failures.  On  the  other  hand,  testing  at  higher  levels  of 
integration  is  more  effective  at  detecting  interactions 
between  component  manufacturing  and  assembly  defects 
that  affect  reliability. 


XVI.  DECISION  MAKING 

As  mentioned  earlier  AHP  method  [15]  can  be  useful  to 
decision  making  in  the  choice  of  COTS  by  experts 

The  following  is  an  AHP  model  for  choosing  the  COTS 
according  to  the  listed  criteria: 


Fig  12:  AHP  structure  model  for  choosing  COTS 
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XVII.  CONCLUSION 

This  methodology  approach  is  a  convenient  way  to 
express  the  system  reliability  as  a  function  of  component 
reliability  and  the  independence  structure  between  the 
functional  levels  considered 

(subsystem/equipment/module/component)  of  course  there 
is  an  interaction  among  level  but  in  this  study,  the  values 
were  negligible.  Another  important  point  that  must  be 
appointed  is  about  the  making  decision  under  many 
uncertainties  considered  in  this  model.  By  the  other  hand, 
these  ways  suggested  give  us  a  possibility  to  find  out  the 
best  solution  to  the  designers  in  the  utilization  of  COTS  in 
an  electronic  circuit  searching  a  balance  among  Cost, 
Reliability,  and  Risk 

XVIII.  CASE  STUDY: 

According  to  the  article  [16],  we  have  a  graph  where  it  is 
observed  that  the  power  subsystem  presents  a  number  of 
failures  very  significant. 


Fig  13:  Faults  observed  in  the  subsystems  in  Cubes 

Satellites  after  injection  in  orbit,  ( Dead  On  Arrival),  30 
and  90  days. 

Based  on  this,  we  will  perform  an  analysis  in  the  power 
circuit  of  the  Tancredo  I  Satellite  "Tubesat"  as  a  case  study 
according  to  the  proposed  method  for  its  validation 
considering  in  this  case  only  3  steps,  as  follow: 

Consideration  of  the  importance  of  reliability  of  each 
component  (Birnbaum  measure)  based  on  the  failure  rate 
(X)  of  an  equivalent  component  MIL  883  or  commercial  by 
(HDBK-217). 

Mapping  of  less  critical  components; 

Using  the  FIDES  Guide  to  determine  the  failure  rate  X 
by  treating  the  failure  physics  plus  the  Karmiol  /  Bracha 
Method  (adapted)  considering  the  complexity  of  the 
component  according  to  the  effect  factors: 

Procedure  step  by  step: 

18.1  Importance  of  Reliability 


Table  02.  Importance  of  the  reliability  of  each 

component  based  on  the  failure  rate  (X)  HDBK-21 7  [17] 


18.2  Mapping  of  less  critical  components 


Fig  14:  Electrical  Scheme  of  the  main  power  circuit  of 

"Ubatubasat"  [18]. File  TUBESAT _Power.sch 

For  instance:  Ull  -  DC/DC  Converter  could  be  the 
component  of  interest  for  the  choice  of  a  COTS 
considering  some  aspects  related  to  its  importance  in  the 
circuit  in  terms  of  sensitivity  in  the  reliability  of  the  power 
subsystem,  since  it  is  sensitive  but  not  as  much  as  the 
voltage  regulator,  some  ceramic  capacitors  and  current 
sensors  as  shown  in  table  4. 

18.3  The  next  step  (FIDES  Guides)  in  this 
methodology  would  be  the  search  for  options  for  DC/DC 
converters  in  the  component  market  that  would  meet  the 
functional  electrical  and  environmental  requirements  of  the 
project.  For  that,  it  is  necessary  to  find  a  failure  rate  of  the 
DC  /  DC  converter  and  multiply  by  complexity  factor  in 
accord  to  suggest  procedure  and  check  if  this  value  is 
appropriate  in  our  case  which  means  verifying  that  the 
value  has  not  compromised  the  reliability  allocated  to  the 
unit.  In  other  wise,  it  continues  to  find  another  part  that 
meets  this  requirement. 

Calculation  of  the  failure  rate  of  the  DC/DC  converter 
using  FIDES  guide  through  the  physical  failure 
mechanisms: 

Failure  Rate  =  ^Physical*  7rpm*  7iprocess 
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Input  data: 

APhys:  Failure  rate  calculated  according  to  the  physical 
failure  mechanisms,  phases  and  times  considered. 

Value  =  379.59366 

Ilpm:  Considers  the  factors  of  the  component 
manufacturer's  quality  and  component  reliability  in 
addition  to  a  coefficient  of  the  relationship  between  the 
representative  (seller)  and  the  manufacturer. 

Value  =  1.42262 

Ilprocess:  Considers  the  audit  done  in  the  fabrication 
process  at  the  company  when  possible  if  not  use  the  default 
value  suggests  by  FIDES  although  the  precision  is  reduced. 

Value  =  4.75525 


Active  Components: 

Comparator,  PWM,  FF  (RS),  Oscillator,  Adder,  Ramp 
Generator,  Current  Limiter,  Shutdown  Circuit,  Driver, 
Transistors  and  FET 

Passive  Components: 

Resistor  and  Capacitor 

nbc =  148 

Kbi  =  10  nbi  /  nbc 

Kbi  =  10  (22/148) 

Kbi  =1.4 

C  =  (1  -  e"Kbi) 

C  =  0.75 


Output  data: 

Part  Failure  Rate  =  2567.9183 
(2567.9183x  10-9  or  2.567  x  10-6) 


For  a  Hybrid  type  circuit  (DC  /  DC  Converter)  we 
have: 


Voltage  Converter 


v+ 

c+ 

> 

GND 

V0U, 

C 

Fig  1 5:  Ex. :  DC  /  DC  Converter  Block 


Block  Diagram 


SHDN  SW 


Fig.  8:  Block  diagram  of  the  DC  /  DC  Converter 
(LM2731) 


C  =  (1  -  e"Kbi) 

Kb  =  10 

nbi  =  22  (n.  of  elements  in  1st  level) 


Therefore,  in  accord  to  proposal  of  this  paper,  we  have: 


Failure  Rate  =  FR/C 
FR  =  2.567/0.75 
FR  =  3.42  FITs  (1/106) 

For  instance:  Tancredo-I  (Tube  Sat) 


Table  03.  Reliability  Allocated 


System:  (Payload}  Langmuir  Probe  -  (Ubatubasat} 

Primary  Mission:  Metfigaode  Plasma 

Reliability  requirement:  R*(87B0tir)  =  0.9 

Subsystem 

Numberof 

parts,  nj 

Operating 
time,  fir,  tj 

Essentiality, 

*7 

A 1  located 

rel  ia  b  i  1  ity, 

R ifo} 

Power 

SI 

3760 

1 

0.95 

T  ra  ns  m  issor/  R  ec  eptor 

4& 

S760 

1 

0.97 

Controller 

4S 

3760 

1 

0.97 

Antenna 

7 

8760 

1 

0.97 

N  =  1S2 

3760 

1 

0.99 

So,  for  the  Tancredo  I  (Tubesat)  power  subsystem,  we 
have: 


nj  =  81 
N=  182 
EJ  =  1 
tj  =  8760hr 


For  the  power  subsystem,  the  reliability  rate  allocated 
considering  reliability  for  the  whole  system  of  R  (t)  =  0.9, 
we  would  have: 


1  -  (0.9)81/182 
R1(8760tj)=  1 - - 

R!(8760tj)  =  0.95 
N  =  total  system  components 
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(1/2)  Power  PCA  Rate  failure  X  =  0.32  change  to 

X  =  3.74  after  calculate  failure  rate  to  DC/DC  Converter 
suggested 

P(t=8760h)  =  1  -  e-At=  1  -  e^3-74*10"6*8760) 

P(t=8760h)  =  1-  e-0,029 

P  (t  =  8760h)  =  0.029,  that  is,  the  DC  /  DC  converter  has 
around  3%  probability  of  failing  up  to  8760h  (one  year)  of 
use  considering  only  one  of  the  power  cards  (1/2).  So  it 
would  serve  this  mission  well,  as  the  reliability  allocated  to 
the  power  unit  was  95%. 

Therefore,  can  we  see  that  after  a  new  failure  rate 
calculated  not  have  great  impact  in  reliability  allocated  to 
power  supplier.  In  this  case,  the  DC/DC  Converter  found  to 
power  supplier  PCA  will  met  the  reliability  requirement 
established  to  mission  time  duration  so  it  could  be  used 
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